$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa File: 0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa (raw, json) Hash identifier: UqInCymooDpqTNJXEV+Pwd71ShAIq+cWfyFOea3D/gw= Subject key identifier: 6E:A9:92:94:60:90:53:28:72:65:C5:58:9B:E3:25:36:0D:62:38:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1879492AB6600A5F02E42F0459C2E24123D5C2B4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa Signing time: Fri 08 May 2026 00:20:08 +0000 ROA not before: Fri 08 May 2026 00:20:08 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff4:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:79:49:2a:b6:60:0a:5f:02:e4:2f:04:59:c2:e2:41:23:d5:c2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 8 00:20:08 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=c59847ff55532a4bd03e7eb0819a6914efb8a11c7ec65103d9923618937e8aa1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:59:d9:bd:2d:53:a6:eb:e8:6a:3e:52:fc: b4:19:42:29:34:86:2c:13:6c:e7:c2:31:1a:d4:dd: 10:d5:ee:2c:61:67:42:6a:12:df:e6:58:8b:aa:45: cd:a8:b5:1a:3f:87:a0:b4:21:d0:e7:38:82:d7:32: ea:d8:85:47:93:3c:93:1d:b7:6d:cf:c4:6c:c8:5f: 0e:46:54:d2:15:af:a9:2e:34:60:08:60:4b:38:54: a5:e1:3e:31:0d:28:d0:ba:2e:7f:0a:87:ce:57:b5: a6:8d:ad:fd:a4:20:6f:a3:d2:c4:e2:61:d1:cf:09: 90:a9:52:3d:fc:4d:ac:de:50:05:08:83:f0:d6:50: 35:4a:d8:57:2b:12:2c:73:ac:3a:df:28:70:da:c4: 10:c1:92:e7:25:a4:09:99:6f:71:c4:46:c0:11:2c: 86:0d:7b:8d:3a:78:0c:b5:cb:cc:5d:f0:6c:2a:fb: e5:25:71:75:3d:81:f7:e6:4d:11:34:b0:2e:8a:13: 89:35:4b:3f:34:02:08:5d:d6:be:4d:19:7a:51:09: db:b6:0d:40:3d:d7:87:97:1e:65:e5:c6:0e:27:eb: 42:6d:0c:59:09:6c:68:e6:80:41:2c:6d:99:60:64: 51:b0:30:6c:ea:d7:2f:f0:99:fc:06:01:f8:4d:5d: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A9:92:94:60:90:53:28:72:65:C5:58:9B:E3:25:36:0D:62:38:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a9d4c87-e208-4010-a5c6-e2c265094a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:8000::/39 Signature Algorithm: sha256WithRSAEncryption 3c:49:7f:84:68:26:fa:4c:a6:d6:65:42:4e:b6:f1:49:e5:5e: ca:bd:9a:f5:31:38:b7:63:12:7e:ad:46:23:b0:b1:4a:fb:e2: ec:5d:82:28:1b:40:a4:1a:2d:af:50:5a:a8:a1:af:77:8f:3b: 68:ab:c5:3d:08:2b:6a:e6:54:9d:1c:ee:68:21:1e:a6:61:b5: 36:87:f8:59:41:a0:a2:f2:b2:fa:95:0e:d9:54:6d:1e:ed:eb: f1:ce:75:04:e3:13:23:9b:98:5d:a8:5f:0b:c4:3a:db:55:cc: d3:99:47:0a:0d:56:4f:3e:c6:1a:fa:d4:34:71:14:20:f7:1a: e1:ca:f0:f4:d9:3e:20:c7:09:8c:cf:d5:32:da:bd:7d:db:a7: fd:34:77:af:eb:08:3e:2d:ad:1e:2e:81:bc:ba:d4:f5:a6:cb: c8:56:d9:ba:0e:10:a2:2e:d5:3d:7f:1a:be:cd:e8:19:98:d7: c5:b2:1f:59:60:9c:d6:37:6d:b2:5f:09:64:b6:c1:a6:f8:68: 13:1c:fa:5c:d9:ac:56:8f:1b:3b:08:32:35:ca:74:54:48:aa: 03:f4:9a:05:86:07:40:4d:ff:d0:d8:d6:d2:31:45:e6:8b:16: 51:ab:1b:33:eb:be:87:0a:d5:a7:8f:1e:87:41:19:ae:d7:b1: 0f:b6:0d:fe -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUGHlJKrZgCl8C5C8EWcLiQSPVwrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAyMDA4WhcNMjYwODA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTk4NDdmZjU1NTMyYTRiZDAzZTdlYjA4MTlhNjkxNGVm YjhhMTFjN2VjNjUxMDNkOTkyMzYxODkzN2U4YWExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyxFnZvS1Tpuvoaj5S/LQZQik0hiwTbOfCMRrU3RDV7ixh Z0JqEt/mWIuqRc2otRo/h6C0IdDnOILXMurYhUeTPJMdt23PxGzIXw5GVNIVr6ku NGAIYEs4VKXhPjENKNC6Ln8Kh85XtaaNrf2kIG+j0sTiYdHPCZCpUj38TazeUAUI g/DWUDVK2FcrEixzrDrfKHDaxBDBkuclpAmZb3HERsARLIYNe406eAy1y8xd8Gwq ++UlcXU9gffmTRE0sC6KE4k1Sz80Aghd1r5NGXpRCdu2DUA914eXHmXlxg4n60Jt DFkJbGjmgEEsbZlgZFGwMGzq1y/wmfwGAfhNXbFBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUbqmSlGCQUyhyZcVYm+MlNg1iOPswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhOWQ0Yzg3LWUyMDgtNDAxMC1hNWM2LWUyYzI2NTA5NGEwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/0gDANBgkqhkiG9w0BAQsFAAOCAQEAPEl/hGgm+kym1mVCTrbxSeVe yr2a9TE4t2MSfq1GI7CxSvvi7F2CKBtApBotr1BaqKGvd487aKvFPQgrauZUnRzu aCEepmG1Nof4WUGgovKy+pUO2VRtHu3r8c51BOMTI5uYXahfC8Q621XM05lHCg1W Tz7GGvrUNHEUIPca4crw9Nk+IMcJjM/VMtq9fdun/TR3r+sIPi2tHi6BvLrU9abL yFbZug4Qoi7VPX8avs3oGZjXxbIfWWCc1jdtsl8JZLbBpvhoExz6XNmsVo8bOwgy Ncp0VEiqA/SaBYYHQE3/0NjW0jFF5osWUasbM+u+hwrVp48eh0EZrtexD7YN/g== -----END CERTIFICATE-----Generated at Tue May 12 23:23:43 2026 by rpki-client